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(54) Method and apparatus for recording of encrypted digital data 

(57) A method for transmission and recording of 
scrambled digital data in which scrambled data is trans- 
mitted together with a control word for descrambling of 
the digital data, the control word Ce itself being 2020-^ 
encrypted by a first key and transmitted in encrypted 
form, the scrambled digital data and encrypted control 
word being received by a decoder 2020 possessing an 
equivalent of the first key necessary to decrypt the 
encrypted control word, the decoder being further 
adapted to pass the digital data in its still scrambled 
form to a digital recording device 4005 and character- 
ised in that the decrypted control word Ce for descram- 
bling the scrambled data is thereafter re-encrypted by . 

means of a second key C2 stored in a portable support ioo^ 7 " 
device 4004 adapted to be received by the decoder 
2020 and/or digital recording device 4005, the re- 
encrypted control word being recorded together with the 
scrambled data on the digital recording medium 4006. 
When replaying the recording, the control word is 
decrypted by means of the second key stored on the 
support means and thereafter used to descramble the 
recording. 


Fig.5. 


4 004^ 


-0" 


[ECM| 


CM 

m 


CM 

o 

CL 
LU 


Primed by Xerox (UK) Business Services 
2.16.7/3.6 


Description 

[0001 ] The present invention relates to a method and 
apparatus for recording scrambled digital data, for 
example television broadcasts. 
[0002] Transmission of encrypted data is well-known 
in the field of pay TV systems, where scrambled audio- 
visual information is broadcast typically by satellite to a 
number of subscribers, each subscriber possessing a 
decoder or receiver/decoder capable of descrambling 
the transmitted program for subsequent viewing. 
[0003] In a typical system, scrambled digital data is 
transmitted together with a control word for descram- 
bling of the digital data, the control word itself being 
encrypted by a first key and transmitted in encrypted 
form, the scrambled digital data and encrypted code 
word being received by a decoder possessing an equiv- 
alent of the first key necessary to decrypt the encrypted 
code word and thereafter descramble the transmitted 
data, the decoder being further adapted to pass the dig- 
ital data in its still scrambled form to a digital recording 
device. A paid-up subscriber will receive on a monthly 
basis the key necessary to decrypt the encryted control 
word so as to permit viewing of a particular program. 
[0004] With the advent of digital technology, the qual- 
ity of the transmitted data has increased many times 
over. A particular problem associated with digital quality 
data lies in its ease of reproduction. Where a descram- 
bled program is passed via an analogue link (e.g. 
the << Peritel )) link) for viewing and recording by a 
standard VCR the quality remains no greater than that 
associated with a standard analogue cassette record- 
ing. The risk that such a recording may be used as a 
master tape to make pirate copies is thus no greater 
than with a standard shop bought analogue cassette. 
[0005] By way of contrast, any descrambled digital 
data passed by a direct digital link to one of the new 
generation of digital recording devices (for example, a 
DVHS recorder) will be of the same quality as the origi- 
nally transmitted program and may thus be reproduced 
any number of times without any degradation of image 
or sound quality. There is therefore a considerable risk 
that the descrambled data will be used as a master 
recording to make pirate copies, either further digital 
copies or even simple analogue VHS copies. 
[0006] French Patent Application 95 03859 shows one 
of overcoming this problem, by means of a system in 
which descrambled digital data is never allowed to be 
recorded on the digital recording medium. Instead, the 
decoder described in this application records the data in 
its scrambled form on the recording medium, together 
with the control word necessary to descramble the data 
re-encrypted by means of another key. This new key is 
known only to the receiver/decoder and replaces the 
first key needed to obtain the code word for viewing of 
the program. 

[0007] The advantage of such a system is that the 
data is never stored in a ( < clear ) ) form and cannot be 


viewed without possession of the new key, stored in the 
receiver/decoder. The system also possesses the 
advantage that, since the first key changes on a monthly 
basis, the use of a constant key to re-encrypt the control 
5 word registered on the digital tape means that the 
receiver/decoder will still be able to decrypt the control 
word recorded on the tape even after the end of a sub- 
scription month. 

[0008] The disadvantage of the system proposed in 

10 this patent application is that the recording can only be 
viewed in conjunction with that particular 
receiver/decoder. If that decoder breaks down, or is 
replaced, the recording can no longer be replayed. 
Equally, it is not possible to play the recording directly in 

is a digital recorder without connecting the 
receiver/decoder in the system and a viewer must there- 
fore maintain his subscription with the pay TV company 
in order to keep the decoder so as to be capable of 
viewing films already transmitted. 

20 [0009] It is an object of the present invention to over- 
come the problems associated with this solution whilst 
keeping enabling secure recording of digital data that 
cannot be easily used to generate pirate copies of the 
transmitted data. 

25 [001 0] The present invention comprises a method for 
transmission and recording of scrambled digital data in 
which scrambled data is transmitted together with a 
control word for descrambling of the digital data, the 
control word itself being encrypted by a first key and 

30 transmitted in encrypted form, the scrambled digital 
data and encrypted control word being received by a 
decoder having access to an equivalent of the first key 
necessary to decrypt the encrypted control word, the 
decoder being further adapted to pass the digital data in 

35 its still scrambled form to a digital recording device and 
characterised in that the decrypted control word for 
descrambling the scrambled data is thereafter re- 
encrypted by means of a second key stored in a porta- 
ble support device adapted to be received by the 

40 decoder, the re-encrypted control word being recorded 
together with the scrambled data on the digital record- 
ing medium. 

[0011] In this way, the present invention overcomes 
the problems of the prior art since the subsequent 

45 replaying of the recorded data becomes independant of 
the identity of the decoder. When replaying the record- 
ing, the control word is decrypted by means of the sec- 
ond key stored on the support means and thereafter 
used to descramble the recording. 

so [001 2] Replacement of the decoder will not invalidate 
the recording in question as long as the new decoder 
has a receptacle for receiving the support device con- 
taining the second key. If supplied with a reader for the 
support device, the digital recorder may itself read the 

55 second key and permit replaying of the data without the 
need for the decoder. Unlike the decoder, which is a rel- 
atively complex piece of equipment which may easily 
break down, the portable support device may be imple- 
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mented in a simple resistant form. 
[001 3] In a particularly preferred embodiment the port- 
able support device is a smart card adapted to be 
received in a smart card reader in the decoder and/or 
digital recorder. In this application the term (( smart s 
card ) ) is used to mean any conventional chip-based 
card device possessing, for example, microprocessor or 
EEPROM memory for stocking the second key algo- 
rithm. Also included in this term are chip devices having 
alternative physical forms, for example key-shaped 10 
devices such as are often used in TV decoder systems. 
[0014] In one embodiment, the smart card also con- 
tains the equivalent of the first key used to decrypt the 
control word for the initial descrambling of the data, eg 
for viewing in the case of a television broadcast system, is 
In such a case, the smart card forms part of the pay TV 
system and may also contain a personalised key known 
to the transmitter to enable the transmitter to selectively 
identify which subscribers will receive an updated first 
key at the end of the month. 20 
[0015] In an alternative embodiment, the second key 
is stored on a smart card different from that used to 
store the first key. In such an embodiment, reading of 
the information stored on the digital medium thus 
becomes completely separate from the subscriber sys- 25 
tern and, even after a subscriber has withdrawn from the 
system and his subscription card withdrawn, he may 
continue to watch previously recorded films provided 
the digital recorder/player that he possesses is adapted 
to read the accompanying smart card. 30 
[0016] In such a system, a single smart card and sec- 
ond key may be used to generate the re-encrypted code 
word for a plurality of recordings. In such a way, a single 
( < library card > > can be used to decrypt any number of 
recordings. 35 
[0017] In one embodiment, the smart card may also 
contain a number of credit units to determine how many 
times the recording may be replayed, the number of 
units being decremented with each subsequent partial 
or complete playing of the recording. These credit units 40 
may be downloaded in a message together with the 
transmitted first key, for example. 
[001 8] In one embodiment the credit units are associ- 
ated with a particular segment of the recording such 
that playing a section of the recording, for example the 45 
first or last quarter hour of the recording will decrement 
certain credit units associated with these sections. 
Alternatively, the credit units are of a single type and are 
decremented with the playing of any section of the 
recording. so 
[0019] As discussed above, the present invention is 
particularly applicable to the case where the second key 
algorithm is stored on a smart card associated with the 
recording medium. However, in an alternative embodi- 
ment, the portable support is defined by the recording 55 
itself, the second key being stored in an integrated cir- 
cuit embedded in the housing of the digital recording 
medium. 


[0020] Such a technique has already been suggested, 
for example, in the case of DVHS cassettes where a set 
of metallic contacts may be provided on an exterior sur- 
face of the cassette housing, the contacts leading to an 
electronic circuit, such as an integrated circuit or chip in 
the interior of the housing. These contacts may be 
engaged by a corresponding set of contacts in the 
receptacle of the recorder to enable communication 
between the integrated circuit and the video recorder. 
[0021] In such systems, security is still provided 
despite the fact that the key is carried with the recording, 
since the key may not easily be copied from within the 
embedded chip. The variations described above with 
regard to the smart card embodiments are equally 
applicable to systems in which the support is defined by 
the recording housing. 

[0022] The present invention is particularly applicable 
to a method in which the scrambled data represents 
audiovisual data transmitted in a scrambled television 
broadcast. 

[0023] The terms ( ( scrambled ) ) and ( ( encrypted > ) 
and << control word )) and << key )) have been used 
here for the purpose of clarity of language. How- 
ever, it will be understood that no fundamental dis- 
tinction is to be made between << scrambled data )> 
and < < encrypted data ) ) or between a ( < control word 
» and a ((key ». 

[0024] Similarly, whilst the description refers to 
(< receiver/decoders >)and << decoders )> it will be 
understood that the present invention applies equally to 
embodiments having a receiver integrated with the 
decoder as to a decoder unit functioning in combination 
with a physically separate receiver. 
[0025] A preferred embodiment of the invention will 
now be described by way of example only and in rela- 
tion to the attached figures, in which: 

Figure 1 shows the overall architecture of a digital 
television system, as may be adapted by the 
present invention to interact with a digital recording 
device 

Figure 2 shows the conditional access system of 
the television system of Figure 1 ; 
Figure 3 shows the different levels of encryptage in 
the television system ; 

Figure 4 shows the structure of a transmitted digital 
packet in the television system, including visual, 
audio and teletext data and an ECM message com- 
ponent ; 

Figure 5 shows a first embodiment of the invention 
including a digital recording device and a smart 
card containing a second algorithm used to encrypt 
the code word to be registered on a digital video 
cassette ; 

Figure 6 shows a second embodiment of the inven- 
tion in which the smart card contains both the first 
and second keys necessary for viewing the trans- 
mitted and recorded program, respectively, 
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together with credit units for determining the 
number of times a program may be watched ; and 
Figure 7 shows a third embodiment of the invention 
in which the second key is stored on an integrated 
circuit mounted in the casing of the digital video s 
cassette. 

Digital TQlgvisipn System 

[0026] An overview of a digital television broadcast 10 
and reception system 1000 adaptable to the present 
invention is shown in Figure 1. The system includes a 
mostly conventional digital television system 2000 
which uses the known MPEG-2 compression system to 
transmit compressed digital signals. In more detail, the is 
MPEG-2 compressor 2002 in a broadcast centre 
receives a digital signal stream (typically a stream of 
video signals). The compressor 2002 is connected to a 
multiplexer and scrambler 2004 by linkage 2006. The 
multiplexer 2004 receives a plurality of further input sig- 20 
nals, assembles one or more transport streams and 
transmits compressed digital signals to a transmitter 
2008 of the broadcast centre via linkage 2010, which 
can of course take a wide variety of forms including tel- 
ecom links. The transmitter 2008 transmits electromag- 25 
netic signals via uplink 2012 towards a satellite 
transponder 2014, where they are electronically proc- 
essed and broadcast via notional downlink 2016 to 
earth receiver 2018, conventionally in the form of a dish 
owned or rented by the end user. The signals received 30 
by receiver 2018 are transmitted to an integrated 
receiver/decoder 2020 owned or rented by the end user 
and connected to the end user's television 2022. The 
receiver/decoder 2020 decodes the compressed 
MPEG-2 signal into a television signal for the television 35 
set 2022. 

[0027] A conditional access system 3000 is connected 
to the multiplexer 2004 and the receiver/decoder 2020, 
and is located partly in the broadcast centre and partly 
in the decoder. It enables the end user to access digital 40 
television broadcasts from one or more broadcast sup- 
pliers. A smartcard, capable of decrypting messages 
relating to commercial offers (that is, on or several tele- 
vision programmes sold by the broadcast supplier), can 
be inserted into the receiver/decoder 2020. Using the 45 
decoder 2020 and smartcard, the end user may pur- 
chase events in either a subscripion mode or a pay-per- 
view-mode. 

[0028] An interactive system 4000, also connected to 
the multiplexer 2004 and the receiver/decoder 2020 and so 
again located partly in the broadcast and partly in the 
decoder, enables the end user to interact with various 
applications via a modemmed back channel 4002. 

Conditional Access System 55 

[0029] With reference to Figure 2, the conditional 
access system 3000 includes a Subscriber Authoriza- 
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tion System (SAS) 3002. The SAS 3002 is connected to 
one or more Subscriber Management Systems (SMS) 
3004, one SMS for each broadcast supplier, by a 
respective TCP-IP link 3006 (although other types of 
linkage could alternatively be used). Alternatively, one 
SMS could be shared between two broadcast suppliers, 
or one supplier could use two SMSs, and so on. 
[0030] First encrypting units in the form of ciphering 
units 3008 utilising <( mother )) smartcards 3010 are 
connected to the SAS by linkage 3012. Second encrypt- 
ing units again in the form of ciphering units 3014 utiliz- 
ing mother smartcards 3016 are connected to the 
mutliplexer 2004 by linkage 3018. The receiver/decoder 
2020 receives a ((daughter )) smartcard 3020. It is 
connected directly to the SAS 3002 by Communications 
Servers 3022 via the modemmed back channel 4002. 
The SAS sends amongst other things subscription 
rights to the daughter smartcard on request. 
[0031 ] The smartcards contain the secrets of one or 
more commercial operators. The < ( mother > )smartcard 
encrypts different kinds of messages and the < (daugh- 
ter ) ) smartcards decrypt the messages, if they have the 
rights to do so. 

[0032] The first and second ciphering units 3008 and 
301 4 comprise a rack, an electronic VME card with soft- 
ware stored on an EEPROM, up to 20 electronic cards 
and one smartcard 3010 and 3016 respectively, for 
each electronic card, one (card 3016) for encrypting the 
ECMs and one (card 3010) for encrypting the EMMS. 
[0033] As will be described, ECMs or Entitlement 
Control Messages are encrypted messages embedded 
in the data stream of a transmitted program and which 
contain the control word necessary for descrambling of 
a program. Authorisation of a given receiver/decoder is 
controlled by EMMs or Entitlement Management. Mes- 
sages, transmitted on a less frequent basis and which 
supply an authorized receiver/decoder with the key nec- 
essary to decode the ECM. 

[0034] The operation of the conditional access system 
3000 of the digital television system will now be 
described in more detail with reference to the various 
components of the television system 2000 and the con- 
ditional access system 3000. 

Multiplexer and Scrambler 

[0035] With reference to Figures 1 and 2, in the broad- 
cast centre, the digital video signal is first compressed 
(or bit rate reduced), using the MPEG-2 compressor 
2002. This compressed signal is then transmitted to the 
multiplexer and scrambler 2004 via the linkage 2006 in 
order to be multiplexed with other data, such as other 
compressed data. 

[0036] The scrambler generates a control word Ce 
used in the scrambling process and included in the 
MPEG-2 stream in the multiplexer 2004. The control 
word Ce is generated internally and enables the end 
user's integrated receiver/decoder 2020 to descramble 
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the programme. Access criteria, indicating hew the pro- 
gramme is commercialised, are also added to the 
MPEG-2 stream. The programme may be commercial- 
ised in either one of a number of (( subscription )) 
modes and/or one of a number of (< Pay Per View >> 
(PPV) modes or events. In the subscription mode, the 
end user subscribes to one or more commercial offers, 
of << bouquets >), thus getting the rights to watch every 
channel inside those bouquets. In the preferred embod- 
iment, up to 960 commercial offers may be selected 
from a bouquet of channels. In the Pay Per View mode, 
the end user is provided with the capability to purchase 
events as he wishes. This can be achieved by either 
pre-booking the event in advance ( < < pre-book mode ) )), 
or by purchasing the event as soon as it is broad- 
cast (( (impulse mode ) )). 

[0037] Both the control word Ce and the access crite- 
ria are used to build an Entitlement Control Message 
(ECM); this is a message sent in relation with one 
scrambled program; the message contains a control 
word (which allows for the descrambling of the program) 
and the access criteria of the broadcast program. The 
access criteria and control word are transmitted to the 
second encrypting unit 3014 via the linkage 3018. In 
this unit an ECM is generated, encrypted with a first key 
Cex and transmitted on to the multiplexer and scrambler 
2004. 

[0038] Each service broadcast by a broadcast sup- 
plier in a data comprises a number of distinct compo- 
nents; for example a television programme includes a 
video component V, an audio component S, a sub-title 
or teletext component T and so on (see figure 4). Each 
of these components of a service is individually scram- 
bled and encrypted for subsequent broadcast to the 
transponder 2014. In respect of each scrambled com- 
ponent of the service, a separate ECM is required. 

Programme Transmission 

[0039] The multiplexer 2004 receives electrical signals 
comprising encrypted EMMs from the SAS 3002, 
encrypted ECMs from the second encrypting unit 3014 
and compressed programmes from the compressor 
2002. The multiplexer 2004 scrambles the programmes 
and transmits the scrambled programmes, the 
encrypted EMM (if present) and the encryped ECMs as 
electric signals to a transmitter 2008 of the broadcast 
centre via linkage 2010. The transmitter 2008 transmits 
electromagnetic signals towards the satellite trans- 
ponder 2014 via uplink 2012. 

Programme Reception 

[0040] The satellite transponder 2014 receives and 
processes the electromagnetic signals transmitted by 
the transmitter 2008 and transmits the signals on to the 
earth receiver 201 8, conventionally in the form of a dish 
owned or rented by the end user, via downlink 2016. 


The signals received by receiver 201 8 are transmitted to 
the integrated receiver/decoder 2020 owned or rented 
by the end user and connected to the end user's televi- 
sion set 2022. The receiver/decoder 2020 demulti- 

5 plexes the signals to obtain scrambled programmes with 
encrypted EMMs and encrypted ECMs. 
[0041] If the programme is not scrambled the 
receiver/decoder 2020 decompresses the data and 
transforms the signal into a video signal for transmission 

10 to television set 2022. 

[0042] If the programme is scrambled, the 
receiver/decoder 2020 extracts the corresponding ECM 
from the MPEG-2 stream and passes the ECM to 
the ( (daughter >> smartcard 3020 of the end user. This 

is slots into a housing in the receiver/decoder 2020. Trie 
daughter smartcard 3020 controls whether the end user 
has the right to decrypt the ECM and to access the pro- 
gramme. 

[0043] If not, a negative status is passed to the 
20 receiver/decoder 2020 to indicate that the programme 
cannot be descrambled. If the end user does have the 
rights, the ECM is decrypted and the control word 
extracted. The decoder 2020 can then descramble the 
programme using this control word. The MPEG-2 
25 stream is decompressed and translated into a video sig- 
nal onward transmission to television set 2022. 
[0044] The levels of encryption used will be described 
in more detail in relation to Figure 3 below. 

30 Subscriber Management System (SMS) 

[0045] A subscriber Management System (SMS) 
3004 includes a database 3024 which manages, 
amongst others, all of the end user files, commercial 
35 offers (such as tariffs and promotions), subscriptions, 
PPV details, and data regarding end user consumption 
and authorization. The SMS may be physically remote 
from the SAS 

[0046] Each SMS 3004 transmits messages to the 
40 SAS 3002 via respective linkage 3006 to enable modifi- 
cations to or creations of Entitlement Management Mes- 
sages (EMMs) to be transmitted to end users. 
[0047] "The SMS 3004 also transmits messages to the 
SAS 3002 which imply no modifications or creations of 
45 EMMs but imply only a change in an end users's state 
(relating to the authorization granted to the end user 
when ordering products or to the amount that the end 
user will be charged). 

so Entitlement Management M essages (EMMs) 

[0048] The EMM is a message dedicated to an indi- 
vidual end user (subscriber), or a group of end users (in 
contrast with an ECM, which is dedicated to one scram- 
55 bled programme only or a set of scrambled programmes 
if part of the same commercial offer). A group may con- 
tain a given number of end users. This organisation as 
a group aims at optimising the bandwitdth; that is, 
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access to one group can permit the reaching of a great 
number of end users. 

[0049] Various specific types of EMM are used in 
putting the present invention into practice. Individual 
EMMs are dedicated to individual subscribers, and are 
typically used in the provision of Pay Per View services; 
these contain the group identifier and the position of the 
subscriber in that group. So-called < (Group >> subscrip- 
tion EMMs are dedicated to groups of, say, 256 individ- 
ual users, and are typically used in the administration of 
some subscription services. This EMM has a group 
identifier and a subscribers* group bitmap. Audience 
EMMs are dedicated to entire audiences, and might for 
example be used by a particular operator to provide cer- 
tain free services. An (< audience )) is the totality of 
subscribers having smartcards which bear the same 
Operator Identifier (OP I). Finally, a ((unique >) EMM is 
addressed to the unique identifier of the smartcard. 

Encryption Levels of the System 

[0050] Referring now to Figure 3, the encryption levels 
in the broadcast system will now be described. The 
stages of encryption associated with the broadcast of 
the digital data are shown at 4001, the transmission 
channel (eg a satellite link as described above) at 4002 
and the stages of decryption at the receiver at 4003. 
[0051] The digital data N is scrambled by a control 
word Ce before being transmitted to a multiplexer Mp for 
subsequent transmission. As will be seen from Figure 4, 
the transmitted data includes an ECM comprising, inter 
alia, the control word Ce as encrypted by an encrypter 
Ch1 controlled by a first encryption key Cex. At the 
receiver/decoder, the signal passes by a demultiplexer 
DMp and descrambler D before being passed to a tele- 
vision 2022 for viewing. A decryption unit DCh1 also 
possessing the key Cex decrypts the ECM in the demul- 
tiplexed signal to obtain the control word Ce subse- 
quently used to descramble the signal. 
[0052] Fa security reasons, the control word Ce 
embedded in the encrypted ECM changes on average 
every 10 seconds or so. In contrast, the first encryption 
key Cex used by the receiver to decode the ECM is 
changed every month or so by means of an EMM. The 
encryption key Cex is encrypted by a second unit ChP 
using a personalised key Cg corresponding to the iden- 
tity of the decoder. If the decoder is one of those chosen 
to receive an updated key Cex, a decryption unit DChP 
in the decoder will decrypt the message using its key Cg 
to obtain that month's key Cex. 
[0053] The decryption units DChp and DCh1 and the 
associated keys are held on a smart card provided to 
the subscriber and inserted in a smart card reader in the 
decoder. The keys may generated according to any 
known symmetric key algorithm, such as DES. Alterna- 
tive embodiments using public/private key algorithms 
are equally possible. 


Recording of Digital Data 

[0054] As set out in the introduction, it is inadvisable 
for descrambled digital data to be permitted to be 
5 recorded in view of the risks that arise in relation to 
unauthorised copying and piracy. As shown in Figure 5, 
the present invention provides a means for overcoming 
this problem. 

[0055] The system comprises a smart card 4004, 
w insertable in a smart card slot in the receiver/decoder, 
together with a digital recorder 4005, eg a DVHS 
recorder, including a digital recording medium 4006, 
such as a DVHS cassette. 

[0056] The decoded control word Ce (together with 
is any other data that forms the ECM, such as access con- 
trol information etc) is passed to the microprocessor 
embedded in the smart card 4004. Using a second 
encryption key C2 and second encryption algorithm 
Ch2, the smart card generates a new ECM, indicated as 
20 ECM' in the figure. This entitlement message ECM' is 
then used to replace the ECM in the scrambled data 
stream from the demultiplexer DMp as shown at 4007 
and the combination of scrambled data and new entitle- 
ment message ECM' are recorded on the DVHS cas- 
25 sette 4006. The entitlement message ECM' may be 
inserted in the data stream circulating a shift control 
register R. 

[0057] By this means, the invention avoids recording 
decoded audiovisual information on the cassette. In 

30 order to play the cassette, the card is reinserted in the 
decoder, the key C2 is used to decode the entitlement 
message ECM', and the subsequently extracted control 
word Ce used to control the decoder to descramble the 
program for viewing. 

35 [0058] In the system shown in Rgure 5 the smart card 
4004 is different from the smart card 3020 shown in Fig- 
ure 2 of the television system and which contains the 
encryption keys necessary for viewing of the program. 
However, in the alternative embodiment shown in Fig- 

40 ure 6, the smart card 3020 contains both the first and 
second encryption keys Cex and C2 needed for viewing 
and recording the program. As represented, the key 
Cex controls the decryption of the ECM to generate the 
control word Ce used by the descrambler D to view the 

45 program and subsequently encrypted by the key C2 to 
form the new entitlement message ECM'. 
[0059] The algorithms DCh1 and DCh2 have not been 
shown for reasons of space. The card 3020 is in fact 
usually also initialised with the personalised key Cg (not 

so shown) enabling the decryption of EMMs so as to obtain 
that month's key Cex stored in the memory of the card. 
Although the smart card has been shown in the form of 
a substantially rectangular card, other physical forms, 
such as key shapes etc, are of course possible. 

55 [0060] The ECM transmitted with the programme and 
decrypted by the card may also contain credit units U 
subsequently stored in the card and which control the 
number of times a recorded film may be viewed. In the 
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simplest embodiment, the credit units may be decre- 
mented during the replaying of the recorded film every 
time an ECM* passes by the decoder. Once the number 
of credits has been decremented to zero, indicating the 
recording has been viewed a predetermined number of 5 
times, a message is sent to the decoder to prevent fur- 
ther viewings of the film, unless the credit units are 
recharged (by, for example, a charging instruction sent 
in an EMM). 

[0061] In alternative embodiments, the credit units 10 
may be decremented every ten or hundred ECM* mes- 
sages. In still further realisations, the credit units may 
correspond to certain sections of the film (for example 
the first or last 10 minutes of the film), such that playing 
these sections will decrement the credit units associ- 15 
ated therewith. The sections can be identified by tag- 
ging the ECM' messages in these sections accordingly. 
[0062] A further embodiment of the invention is shown 
in Figure 7. In this embodiment, the generation of the 
new entitlement message EMM' is controlled by an inte- 20 
grated circuit or chip 4008 possessing the second 
encryption key C2 and embedded in the casing of the 
recorded cassette 4006. Incorporation of a microproc- 
essor within the housing of the recording medium is a 
known technique and has been suggested for example 25 
in the case of DVHS cassettes. In this example, a set of 
metallic contacts may be provided on an exterior sur- 
face of the cassette housing, the contacts leading to an 
electronic circuit, such as an integrated circuit or chip in 
the interior of the housing. These contacts may be 30 
engaged by a corresponding set of contacts in the 
receptacle of the recorder to enable communication 
between the integrated circuit and the video recorder. 
[0063] As will be appreciated, whilst it is straightfor- 
ward to copy the recorded (and scrambled) digital data, 35 
the data stored in the chip will be resistant to copying 
and, as with the previous embodiments, the scrambled 
data will be useless without the key C2 necessary to 
unlock the ECM' to obtain the control word used by the 
descrambler. 40 
[0064] As will be understood, in all embodiments 
described, the elements of the receiver/decoder and the 
digital recording device may be combined or inter- 
changed, such that the digital recorder possesses a 
smart card slot for receiving a smart card, for example, 45 
and/or the necessary elements to descramble the pro- 
gram once the control word Ce has been extracted from 
the ECM' message. 

Claims so 

1 . A method for transmission and recording of scram- 
bled digital data in which scrambled data is trans- 
mitted together with a control word for descrambling 
of the digital data, the control word itself being 55 
encrypted by a first key and transmitted in 
encrypted form, the scrambled digital data and 
encrypted control word being received by a 
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decoder having access to an equivalent of the first 
key necessary to decrypt the encrypted control 
word, the decoder being further adapted to pass 
the digital data in its still scrambled form to a digital 
recording device and characterised in that the 
decrypted control word for descrambling the scram- 
bled data is thereafter re-encrypted by means of a 
second key stored in a portable support device 
adapted to be received by the decoder, the re- 
encrypted control word being recorded together 
with the scrambled data on the digital recording 
medium. 

2. A method as claimed in claim 1 in which the porta- 
ble support device is a smart card adapted to be 
received in a smart card reader in the decoder 
and/or digital recorder. 

3. A method as claimed in daim 2 in which the smart 
card also contains the equivalent of the first key 
used to decrypt the control word for the initial 
descrambling of the data. 

4. A method as claimed in claim 2 in which the second 
key is stored on a smart card different from the 
means used by the decoder to store the first key. 

5. A method as claimed in any of claims 2 to 4 in which 
a single smart card and second key are used -to 
generate the re-encrypted code word for a plurality 
of recordings. 

6. A method as claimed in any of claims 2 to 5 in which 
the smart card also contains a number of credit 
units to determine how many times the recording 
may be replayed, the number of units being decre- 
mented with each subsequent partial or complete 
playing of the recording. 

7. A method as claimed in claim 6 in which the credit 
units are associated with a particular segment of 
the recording such that playing a section of the 
recording decrements certain credits associated 
with that section. 

8. A method as claimed in claim 7 in which the credit 
units are of a single type and are decremented with 
the playing of any section of the recording. 

9. A method as claimed in claim 1 in which the porta- 
ble support is defined by the recording medium 
itself, the second key being stored in an integrated 
circuit embedded in the housing of the digital 
recording medium. 

10. An apparatus adapted for transmission and record- 
ing of scrambled digital data as claimed in any of 
claims 1 to 9 comprising a transmitter for scram- 
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bling and transmitting digital data together with a 
control word for descrambling of the digital data 
encrypted by a first key and transmitted in 
encrypted form, a decoder for receiving the scram- 
bled digital data and encrypted code word and hav- 5 
ing access to an equivalent of the first key 
necessary to decrypt the encrypted code word, and 
a portable support device adapted to be received 
by the decoder and possessing a second key for re- 
encrypting the decrypted code word, the re- w 
encrypted code word together with the scrambled 
data being sent by the decoder to a digital recording 
device for recordal on a digital recording medium. 

11. A decoder for the apparatus of claim 11 and is 
adapted for use in the method of any of claims 1 to 

9 including a receptacle for receiving a portable 
support device possessing a second key for re- 
encrypting the decrypted code word. 

20 

12. A decoder as claimed in claim 11 integrated with a 
digital recording device for registering the re- 
encrypted code word and scrambled data on a dig- 
ital recording medium. 
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Fig. 5. 
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